CVE-2014-9221

Mô tả

Tham khảo

• lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2015-01/msg00054.html · Third Party Advisory
• secunia.com/advisories/62071 · Permissions Required
• secunia.com/advisories/62083
• secunia.com/advisories/62095 · Permissions Required
• secunia.com/advisories/62663 · Permissions Required
• strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html · Vendor Advisory
• strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html
• debian.org/security/2015/dsa-3118 · Third Party Advisory
• securityfocus.com/bid/71894
• ubuntu.com/usn/USN-2450-1 · Third Party Advisory

Lỗ hổng khác của strongswan

• CVE-2026-78135CAO 7.3libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are …
• CVE-2026-78134CAO 7.1strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche…
• CVE-2026-78133CAO 7.5libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
• CVE-2026-78132CAO 7.5strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
• CVE-2026-78131THẤP 3.7strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parse…